Description

The exif_read_data function in the Exif module in PHP before 5.2.10 allows remote attackers to cause a denial of service (crash) via a malformed JPEG image with invalid offset fields, a different issue than CVE-2005-3353.

Remediation

References

CVE-2009-2687

Related Vulnerabilities

WordPress Plugin Image Gallery with Slideshow Multiple Vulnerabilities (1.5.2)

Oracle Application Server Other Vulnerability (CVE-2002-0843)

Joomla! Core 1.0.x Multiple Unspecified Vulnerabilities (1.0.0 - 1.0.7)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-0238)

MySQL CVE-2013-1523 Vulnerability (CVE-2013-1523)

Severity

Medium

Classification

CVE-2009-2687 CWE-20

Tags

Missing Update Known Vulnerabilities